DATA CONTROLLER

CANARY SCHOOL OF CRUISES, S.L.c/ Miraflores, 19- 38003 de Santa Cruz de TenerifeTelephone: +34 922 240 559VAT ID NUMBER. B38393070Email:   info@eccyacht.comFrom now on ECCYACHT

This policy defines the conditions of use of the domain https://www.eccyacht.es/ and its social networks on Facebook, Twitter and LinkedIn so we encourage you to read these privacy terms and conditions.

ECCYACHT wishes to inform users of the website and, in particular, its customers and users, of its policy regarding the processing and protection of the personal data of users and customers that it collects from them when viewing the site or using the services offered therein.

Personal data shall mean any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is any person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

MINORS

Under no circumstances will data be collected from minors, as we only allow user registration and the contracting of services through our website to persons of legal age with full capacity to act in legal transactions. If you are a minor and have accessed this website, please note that you will not be able to register. In this regard, ECCYACHT has established a procedure to ensure at all times that the person applying for registration is not only of legal age, but also meets the professional requirements for the proposed professional practice.

COMMITMENT

ECCYACHT has strived to create and maintain a safe and trustworthy space in which to fully develop your professional practice, hence we hold up as a banner some principles that will make you feel safe:

1.- We will never request personal information that is not strictly necessary for the provision of the service.

2.- We will never share personal information with anyone, except by law or with your express consent.

3.- We will never use the data you have provided us with for a purpose other than the purpose collected and expressed at the time you communicate it to us.

ECCYACHT will modify this privacy policy whenever necessary in order to adapt it to any legislative or regulatory change, or in order to adapt it to the instructions issued by the Data Protection Agency. In this sense, ECCYACHT recommends users the regular reading of these policies so that users can be aware of any changes made to them.

The collection, processing and subsequent use of personal data are subject to current Spanish legislation on data protection, as well as in accordance with the new RGPD of the European Union and other complementary regulations to be developed. ECCYACHT will only be responsible for and guarantee the confidentiality and security of the personal data collected from the user through the website. https://www.eccyacht.es/ shall have no liability whatsoever for the processing and subsequent use of personal data that may be made by third party information society service providers acting outside the website.

PURPOSES

The personal data provided through the registration and contact form on the website will be processed by ECCYACHT for the purposes detailed in this section. By ticking the box, users expressly and clearly, freely and unequivocally accept that their personal data will be processed by the provider for the following purposes:

1. Customer registration and account opening.
2. Registration of legal representatives.
3. Vessel registration.
4. Registration of boat rentals.
5. Registration of sale of vessels.
6. Invoicing management.
7. Collection management.
8. For the purpose of managing the nautical school's training activities.
9. For the purpose of managing actions with the public administration for exams to obtain navigation licences, qualifications, etc...
10. For the management of commercial events for the brands we represent.
11. Sending communications related to the exercise of its own commercial activity.
12. Historical and statistical purposes.
13. In order to offer third party products or services, related to the shipping and maritime sector, which may be of interest to the client.

CONTACT AND WEB FORMS. We may treat your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data in the contact form, you must identify yourself so that we can contact you, if necessary:

• Respond to your queries, requests or petitions.
• Manage the requested service, answer your request, or process your request.
• Information by electronic means, relating to your request.
• Commercial or event information by electronic means, subject to express authorisation.
• Carry out analysis and improvements on the Web, on our products and services. Improve our professional and communication strategy.

Acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.

WHEN ARE USERS' PERSONAL DATA COLLECTED ON THE WEBSITE?

ECCYACHT informs its users that personal data is collected by filling in the forms and e-mail addresses in the "Contact" section of the website.

If you do not wish ECCYACHT to process your personal data, please refrain from filling in the forms on the website. In any case, ECCYACHT will expressly and legibly inform you of the conditions under which personal data are collected and the purposes for which they will be used, of the obligation to provide them or not, of the rights of the user, of the conditions under which they may be exercised, and of any other complementary information that may be necessary.

Processing of personal data shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The provider expressly informs and guarantees users that their personal data will not be transferred under any circumstances to third party companies, and that whenever any type of transfer of personal data is to be made, the express, informed and unequivocal consent of the owners will be requested beforehand.

The provider expressly informs and guarantees that no international transfer of data to third countries will take place.

All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the user. In the event that all the data is not provided, the provider does not guarantee that the information and services provided will be completely tailored to your needs.

WHAT PRINCIPLES WILL WE APPLY TO THE PROCESSING OF YOUR DATA?

In the processing of personal data, we will apply the following principles that comply with the demands and requirements of the new General Data Protection Regulation and whose philosophy and purpose we fully share. They are as follows:

• Personal data must be processed lawfully, fairly and transparently.
• Personal data must be collected for specified, explicit and legitimate purposes.
• Personal data must be adequate, relevant and limited to what is necessary in relation to the processing.
• Personal data must be accurate and always up to date.
• Personal data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing.
• Personal data must be processed in such a way as to ensure their security.

WHAT IS THE LEGITIMACY WE HAVE TO PROCESS YOUR DATA?

LEGITIMACY

Below, we explain the legal basis that allows us to use your data:1. When you give us your consent.2. Fulfilment of a contractual relationship.3. By a legal obligation. Among other regulations, the following: R 1435/2010, of 5 November on the registration of recreational craft. RD 875/2010, of 10 October, which regulates the qualifications of recreational craft. Resolution 9 March 2010, of the Directorate General of the Merchant Navy, on the examination for foreign qualifications.3. In order to better meet your expectations and to increase your satisfaction as a customer by developing and improving the quality of the services we provide and which may be of interest to you. In order to achieve this objective, we need to process your information anonymously, without any characteristic that could identify you. Also, for legitimate interest, ECCYACHT wants to maintain a close and familiar relationship with its customers so that in our professional relationship, we could congratulate you for the holidays. These legitimate interests respect your right to the protection of personal data, honour and personal and family privacy. It is desirable and required that from ECCYACHT you have a reasonable expectation that your data will be used anonymously (applying security measures and techniques to ensure confidentiality and prevent your identification) so that we can improve the services we provide to the professional group that we serve and of which you are a part. Remember that, in cases based on legitimate interest, you can always exercise your right to object if you consider it appropriate at the following address info@eccyacht.com

To whom will we communicate your data? Addressees.

TARGET

We will not transfer your personal data to third parties, unless we are obliged to do so by law or unless you have given your unequivocal, clear and express consent. In any case, data will be communicated or transferred to:- Maritime Captaincy - General State, Autonomous Community, Local Administrations and competent public institutions, for the exercise of similar competences or when so established by law.- Public services responsible for the production of official statistics - Private entities with whom a collaboration agreement has been signed within the framework of the ECCYACHT's own functions, such as training and professional certification of clients - Insurance companies, due to the existence of compulsory insurance, or with the client's consent, for professional liability.- To service providers who act as data processors.- Media and dissemination when carrying out institutional actions, training, social and/or recreational events, including the corporate website and its social networks.- In the event of non-payment, communicate your data to solvency companies.- Any other resulting from the regulations in force.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

Right to InformationYou have the right to be clearly informed BEFORE your data is collected about what data is being processed about you, for what purpose it is being processed, where the data has been collected and whether it will be or has been disclosed to anyone.

Right of Accessto find out what data about you is being processed, for what purpose it is being processed, where the data has been obtained and whether it will be communicated or has been communicated to someone else.

Right of rectificationto modify your inaccurate or incomplete data.

Right of Cancellationto cancel your inappropriate or excessive data.

Right of Oppositionto prevent the processing of your data or to stop the processing of your data, but only in the cases provided for by law.

Right to restrict processingto request the suspension of data processing in the cases established by the law

Right to Data Portabilityto receive your provided data in a structured and commonly used electronic format and to transmit it to another data controller.

Right not to be subject to individualised decisionsin order to ensure that no decision is taken about you that produces legal effects or affects you based solely on the processing of your data.

• Any customer has the right to obtain confirmation as to whether or not ECCYACHT is processing personal data concerning them. The persons concerned have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims. You may request the restriction of processing in the following cases:

1. While your data is being checked for accuracy.
2. Where the processing is unlawful, but you object to the erasure of the data.
3. When ECCYACHT does not need to process your data, but you need them for the exercise or defence of your claims.
4. When you have objected to the processing of your data for the performance of a task carried out in the public interest or for the fulfilment of a legitimate interest, while verifying whether the grounds for the legitimate interest for the processing outweigh yours.

• In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. ECCYACHT will stop processing the data, except for legitimate reasons, or the exercise or defence of possible claims.
• In certain circumstances and for reasons related to their particular situation, data subjects may request the portability of their personal data. You will be able to receive, in electronic format, the personal data that you have provided to us and those that have been obtained from your collegial relationship with ECCYACHT, as well as to transmit them to another professional association.
• We advise you of your right to withdraw, at any time, the consent given to process your data, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
• If you consider that we have not processed your personal data in accordance with European and national regulations, we remind you, by legal imperative, of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es), if you consider that the processing of your data is not in accordance with European regulations.
• You can exercise your rights, providing proof of your identity (photocopy of your ID), by sending an email to the following address: info@eccyacht.com
• The exercise of these rights is free of charge.
• Likewise, at any time, you may withdraw the consent given without affecting the lawfulness of the processing by sending your request to the address indicated above or by going to the central offices of ECCYACHT. Remember to enclose your ID card with your request or equivalent document proving your identity.

HOW LONG WILL WE KEEP YOUR DATA?

CONSERVATION PERIOD

Depending on the type of data to be processed:- The personal data provided will be kept for as long as the customer status is held.- The data will be kept indefinitely, until the data subject requests their deletion.- The data will be kept for the period established by the public administration in the exercise of its public powers for the control of maritime traffic.- The data will be kept for the period established by the public administration in the exercise of its public powers for the control of maritime traffic.- The data will be kept for the duration of the legal obligations imposed in the tax and/or commercial field.- Once the contractual relationship has been terminated, the data will be kept blocked during the legal prescription periods which, in general, are 10 years due to the application of the regulations for the prevention of money laundering and the financing of terrorism.

HOW CAN I EXERCISE MY RIGHTS?

To exercise any of your rights, you may exercise your rights by sending an express request by the following means:

1. E-Mail: info@eccyacht.com
2. Postal address: To the Data Protection Officer: c/ Miraflores, 19- 38003 de Santa Cruz de Tenerife
3. Or by visiting the ECCYACHT headquarters at the above address.

1.- Photocopy of ID card (passport or other identity document) or electronic signature.

2.- Content of the request you are making and, if necessary, the documents that support it.

3.- Address (for notification purposes), date and signature

If you exercise your rights through a voluntary representative expressly designated, you must provide the document or electronic instrument that accredits the representation.

 WHAT CAN I DO IF MY RIGHTS HAVE NOT BEEN MET?

In case you consider that we have not satisfied your request, you can submit a complaint to the Spanish Data Protection Agency in the section of its website:

https://sedeagpd.gob.es/sede-electronica-web/vistas/formReclamacionDerechos/reclamacionDerechos.jsf

ECCYACHT informs that the exercise of the aforementioned rights by a third party not legally authorised by the user could lead to the commission of the crime of discovery and revelation of secrets provided for in the second section of article 197 of the Penal Code, punishable by a prison sentence of one to four years and a fine of twelve to twenty-four months; without prejudice to other consequences that the user may face as a result of any civil or administrative actions to which both the legitimate owner of the personal data and ECCYACHT may be entitled.

Similarly, the user may unsubscribe from any of the subscription services provided by clicking on the unsubscribe section of all e-mails sent by the provider.

Likewise, the provider has adopted all the technical and organisational measures necessary to guarantee the confidentiality, integrity and availability of the personal data it processes, as well as to prevent its loss, alteration and/or access by unauthorised third parties, as established in article 32 of the RGPD.

USE OF COOKIES AND THE ACTIVITY FILE

The provider, on its own account or that of a third party contracted to provide measurement services, may use cookies when a user browses the website. Cookies are files sent to the browser by a web server in order to record the user's activities during their browsing time.

The cookies used by the website are only associated with an anonymous user and his or her computer, and do not in themselves provide the user's personal data.

Through the use of cookies it is possible for the server where the website is located to recognise the web browser used by the user in order to make browsing easier, allowing, for example, access to users who have previously registered, access to areas, services, promotions or competitions reserved exclusively for them without having to register on each visit. They are also used to measure the audience and traffic parameters, monitor progress and number of entries.

The user has the possibility of configuring their browser to be notified of the reception of cookies and to prevent their installation on their computer. Please consult the instructions and manuals of your browser for further information.

To use the website, it is not necessary for the user to allow the installation of the cookies sent by the website, or the third party acting on its behalf, without prejudice to the fact that it is necessary for the user to log in as such in each of the services whose provision requires prior registration or "login".

The cookies used on this website are, in any case, of a temporary nature with the sole purpose of making their subsequent transmission more efficient. Under no circumstances will cookies be used to collect personal information.

IP ADDRESSES

The website servers may automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file that allows the subsequent processing of the data in order to obtain purely statistical measurements that make it possible to know the number of page impressions, the number of visits made to the web services, the order of visits, the access point, etc.

SECURITY

The website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all with the aim of preventing unauthorised access to data. To achieve these purposes, the user/customer agrees that the provider obtains data for the purposes of the corresponding authentication of access controls.

RECOMMENDATIONS ON THE USE OF THE INTERNET

ECCYACHT reminds users that the Internet is not always as secure as we would like it to be, and that they should therefore adopt the necessary and appropriate technical measures to prevent unauthorised processing of their data.

Whenever you provide personal information over the Internet via e-mail, newsgroups, discussion forums, etc., please be aware that such information may be collected and processed for purposes that you do not intend, and ECCYACHT recommends that users inform themselves about the privacy and confidentiality policies of the online sites they visit.

Please note that unless you use encryption mechanisms, e-mail on the Internet is not secure. Mail and discussion forum messages can be subject to forgery and impersonation, and you should be aware of this whenever you use them. If you do not want to publish your e-mail address, configure your browser so that it does not leave your e-mail address on the web servers you access.

When you browse the Internet, please be aware that the web servers you visit may record both the pages you access and the frequency and topics or subjects for which you search, even if they do not inform you of this. If you do not wish to record your activities, use servers that preserve your anonymity.

Use the latest versions of browsers whenever possible, as they tend to incorporate better and better security measures. Consider activating options in these programmes that warn about the exchange of unwanted data.

Use the security mechanisms available to you (secure web servers, cryptography, digital signature, etc.) to protect the confidentiality and integrity of your data to the extent necessary.

This document sets out the privacy policy of https://www.eccyacht.es/ and its social networking site Facebook, Twitter and LinkedIn. This version has been updated as of 01/06/2018.